261–270 of 385 posts
Earlier quoted context omitted.
> "Surely Amazon has a Chinese wall" to prevent that kind of data sharing, I thought. Never underestimate the lack of morals in business is the right answer I guess. It’s remarkable to me how many competent programmers with years or decades experience in this industry don’t understand —- If you’re using AWS, Amazon has access to ALL of the data you put on AWS. Not that they 'can' or 'want to', given the current state…
I think enclaves are a more practical near-term solution for data privacy, but they don't prevent Amazon from identifying successful businesses based on e.g. resource usage growth.
Even with ‘enclaves’, from what admittedly little I know about them, you still have to have the key to decrypt things on the machine somewhere, which means whoever is running that machine for you has access to your unencrypted data, and we’re back where we started.
Earlier quoted context omitted.
This frankly doesn't match my experience and I have to say I find it unlikely. Before going into our AWS production S3 buckets, looking at our databases for customer lists AWS seems to be pretty careful to get an OK. Now we are being told that production customer data was normal to trawl? How in the HELL are they passing all their certs with all production data so wide open. I do customer managed keys - I mean, this…
My understanding is that Customer Managed CMK in KMS only means that the customer has control over the key operations - like rotation, key policies, IAM policies, etc. AWS still has actual control over the KMS system and full access to the HSM.
Earlier quoted context omitted.
I worked at Medtronic and currently work at Qualcomm. Both companies had policies matching this. Don't search patents so you are not influenced by them.
Since when did that matter in patent law? Patents are public domain, and ignorance of a patent is not a defense against having infringed. Since at least 2012, the US has had a first-to-file policy instead of first-to-invent. There's no legal reason to worry about being influenced by a patent. The only concern might be boxing your creativity where you can't think of alternative solutions to a problem once you've seen…
Earlier quoted context omitted.
There's nothing sinister about a copycat. It just feels that way selfishly for the original creator. Capitalism works best in the long run with near perfect competition, copy cats are great for everyone except the first guy with the idea.
Hey it's me pyrrhotech, and upon some additional reflection decided that I was wrong and maybe there are some issues with copycats. Just wasn't thinking straight before.
we need a pure-play cloud provider like TSMC. No one should trust the big three. (AWS, GCP, Azure)
Earlier quoted context omitted.
>> It is your fault, in the end, to not report your team Talk about all time gaslighting. It's the managers/directors job to ensure compliance, not normal employees.
If you see another employee committing a crime, you're obligated to report it under US law. You can be considered an accessory if you don't.
That is totally false.
Conspiracy requires two elements: an agreement to commit a crime, and an act in furtherance of said crime. There is nothing unlawful about looking the other way. You might be a scumbag, but that's a different problem.
The elements of criminal accessory require one to harbor, conceal, or act in such a way as to help someone avoid or escape arrest or punishment (CA law here, other states may be different). Again, merely "looking the other way" is not an act. Otherwise, anyone who merely witnessed a crime could be charged with criminal accessory.
That said, corporate policy might be quite different. If I look the other way while a colleague violates customer security policies (and I'm aware of such violation), I can justifiably be fired.
*Not giving legal advice, seek licensed counsel in your jurisdiciton.